In this post I will explain how to create a user-defined route and route your resources traffic through it. This guide will be very helpful specially if you have a network or security appliance deployed on azure or even on-prem.
First of all, you have to know that Azure automatically creates a route table for each subnet within an Azure virtual network and adds system default routes to the table
We have two main type of routes on Azure:
Now, let’s create a route table on azure and route resources traffic into the Palo Alto Firewall (I have deployed it before) through the UDR
1- Login to Azure Portal
2- From Home > Click on Create A Resource
3- Search for Route Table
4- Select it then click on Create and configure the following settings:
Now let's Consider that your Virtual Applicance "in my case Palo Alto Firewall" has the IP "10.11.11.9"
5- The most important parts in the route table is the Subnet & and Routes
6- Select Subnet column, then Click on Associate
The subnets associated with this route table are now visible in the subnets section of your route tables column
IF you have any VM running on Azure you must restart it in order to update the route, or you can run the below commands on the VM
netsh winsock reset
netsh int IP reset
Note: After associating the sbunet your VMs might not be accessible anymore! unless you de-associate the subnet, so we recommend to add the routing and test it on a testing VM then start associating the Subnets.
7- and let's Add Route, from Settings column, click Routes
8- In the Routes column, click + Add
In the Add route column, configure the following settings:
Finally, I want you to focus on the Rotues coulmn as it's the most import field when we talk about UDR.
Let's consider that you have have a vNet on a different subscription or even on-prem so how you can forward the traffic into your virtual applicance?
I will show you an example:
By adding the Routes with the subnet in the Route table you will be able to reach the virtual appliane from differnet subscription or from On-Prem servers.
3/29/2022 02:37:16 am
Good article. Any suggestions on how you route the management interface through the vpn if you have panorama on premise? I assume this could be UDR?
3/30/2022 01:44:31 am
Leave a Reply.
Mohammad Al Rousan is a Microsoft MVP (Azure), Microsoft Certified Solution Expert (MCSE) in Cloud Platform & Azure DevOps & Infrastructure, An active community blogger and speaker.
Al Rousan has over 8 years of professional experience in IT Infrastructure and very passionate about Microsoft technologies and products.
Top 10 Microsoft Azure Blogs